CVE-2016-6710

An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Android ID: A-30537115.

• CWE-200

• http://www.securityfocus.com/bid/94170Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/94170Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory

Published

Nov 25, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6704An elevation of privilege vulnerability in Mediaserver in An…
• CVE-2016-6705An elevation of privilege vulnerability in Mediaserver in An…
• CVE-2016-6706An elevation of privilege vulnerability in libstagefright in…
• CVE-2016-6707An elevation of privilege vulnerability in System Server in …
• CVE-2016-6708An elevation of privilege in the System UI in Android 7.0 be…
• CVE-2016-6709An information disclosure vulnerability in Conscrypt and Bor…
• CVE-2016-6711A remote denial of service vulnerability in libvpx in Medias…
• CVE-2016-6712A remote denial of service vulnerability in libvpx in Medias…
• CVE-2016-6713A remote denial of service vulnerability in Mediaserver in A…
• CVE-2016-6714A remote denial of service vulnerability in Mediaserver in A…
• CVE-2016-6715An elevation of privilege vulnerability in the Framework API…
• CVE-2016-6716An elevation of privilege vulnerability in the AOSP Launcher…